Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
File:                     GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json)
Hash identifier:          K36TQRWuxO0aUMBvAJvVu53o8NTID89YjFycWA/HEXo=
Subject key identifier:   F5:01:E6:5B:A5:B6:5B:4F:33:17:D6:A3:5D:8E:D1:9E:A5:CD:46:AE
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Certificate issuer:       /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
Manifest number:          47
Signing time:             Fri 17 Apr 2026 08:08:40 +0000
Manifest this update:     Fri 17 Apr 2026 08:08:40 +0000
Manifest next update:     Fri 24 Apr 2026 08:08:40 +0000
Files and hashes:         1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: iCBO/obu6vH1nDWjnWbbQ9oyLcmzGKulLhARIq2YgbQ=)
                          2: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=)
                          3: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
        Validity
            Not Before: Apr 17 08:08:40 2026 GMT
            Not After : Apr 24 08:08:40 2026 GMT
        Subject: CN=69e1ea88-8bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:79:a4:fd:ec:d6:03:51:62:18:28:ed:01:
                    6a:05:2b:c8:b6:d2:7f:ee:7a:d8:5f:9e:e8:35:1c:
                    cf:5f:e1:4a:95:10:c9:11:81:b6:fe:cc:2b:bb:3b:
                    60:3e:8e:da:4e:8a:f0:fd:3b:43:0b:c7:aa:9f:a1:
                    a4:3a:59:aa:28:6a:34:80:8a:b4:ae:d5:80:92:7e:
                    aa:be:91:3f:b2:3f:7b:18:23:ce:72:56:42:2c:a5:
                    78:4b:34:ab:d1:96:12:65:d3:ad:a4:7f:89:d0:55:
                    63:10:b5:04:70:7e:6f:68:b8:48:ef:95:19:6d:2e:
                    a8:3a:0f:53:ff:e1:c2:01:27:21:b3:31:5e:83:e7:
                    67:e6:bf:92:2d:27:82:fe:1d:dd:31:c5:87:bf:22:
                    91:2a:0d:55:92:32:d6:e5:e4:5b:ea:c0:df:a5:47:
                    c2:7e:3e:53:82:65:ed:81:b8:28:2f:6a:01:2f:71:
                    2c:e2:c9:99:1f:e8:58:42:c3:e4:9d:88:2b:dd:08:
                    69:89:ef:97:5d:8e:8a:76:a2:b7:e7:98:36:c8:fb:
                    b6:21:b0:e0:42:11:9e:83:19:70:4c:d8:16:41:68:
                    51:ed:c7:4c:b7:b1:a6:00:5b:81:ba:d6:70:c9:1c:
                    a8:e6:28:57:1d:c2:ea:6b:4e:a0:be:f9:5b:45:c5:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:01:E6:5B:A5:B6:5B:4F:33:17:D6:A3:5D:8E:D1:9E:A5:CD:46:AE
            X509v3 Authority Key Identifier:
                keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:28:fe:a7:bf:82:50:9c:69:78:40:56:a5:dd:99:3e:6e:87:
         e0:9e:5e:2e:ef:4b:7b:f7:f9:b7:20:5a:3c:58:db:25:c1:ce:
         13:4a:33:70:bf:de:15:63:72:f4:3b:fd:87:0e:73:85:4a:50:
         e3:22:d1:09:22:f5:4d:91:57:8f:ca:fe:d6:af:bc:7a:48:e0:
         40:0f:ff:93:c1:5e:dd:a1:b0:35:2b:81:fe:25:9d:12:34:83:
         90:2c:70:0f:6e:8f:19:26:54:cd:8d:9e:3f:46:31:55:24:cf:
         cd:92:a0:86:2e:7e:dc:5b:d7:53:75:0d:50:2d:c7:06:d6:e4:
         70:cf:45:70:8a:4d:b6:ec:20:e0:97:f2:94:8a:63:41:7f:fd:
         f5:61:c4:0d:55:7f:02:c3:e8:93:6c:39:bc:7e:f1:45:7f:57:
         11:89:21:1c:aa:23:c8:bb:27:04:7e:aa:e2:4a:f6:82:c6:4f:
         e6:89:df:43:9d:d3:db:22:33:88:ec:07:35:34:1a:47:89:29:
         d8:1e:a1:84:60:64:b4:d3:c3:0f:1b:f7:8c:75:2e:dd:9f:29:
         79:6a:35:ea:20:62:27:6c:0c:a0:ff:b3:de:e1:cc:ef:f1:0b:
         db:e7:de:34:ea:2b:47:b7:b6:1d:51:01:15:0a:9a:de:ba:46:
         82:49:00:ef
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTlDQzExMC8GA1UEBRMoMUIzNjgzNTI1OTQ0Nzc0Mzg4ODUzMDkwRDEwMDVCQjUx
NTUyMjQ2RDAeFw0yNjA0MTcwODA4NDBaFw0yNjA0MjQwODA4NDBaMBgxFjAUBgNV
BAMTDTY5ZTFlYTg4LThiYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCc5Xmk/ezWA1FiGCjtAWoFK8i20n/uethfnug1HM9f4UqVEMkRgbb+zCu7O2A+
jtpOivD9O0MLx6qfoaQ6WaooajSAirSu1YCSfqq+kT+yP3sYI85yVkIspXhLNKvR
lhJl062kf4nQVWMQtQRwfm9ouEjvlRltLqg6D1P/4cIBJyGzMV6D52fmv5ItJ4L+
Hd0xxYe/IpEqDVWSMtbl5FvqwN+lR8J+PlOCZe2BuCgvagEvcSziyZkf6FhCw+Sd
iCvdCGmJ75ddjop2orfnmDbI+7YhsOBCEZ6DGXBM2BZBaFHtx0y3saYAW4G61nDJ
HKjmKFcdwuprTqC++VtFxWDPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9QHmW6W2
W08zF9ajXY7RnqXNRq4wHwYDVR0jBBgwFoAUGzaDUllEd0OIhTCQ0QBbtRVSJG0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOUNDLzk5MTRCOEU0REEx
RjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBPSWhUQ1EwUUJidFJWU0pH
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR3phRFVsbEVkME9JaFRDUTBRQmJ0UlZTSkcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx
OUNDLzk5MTRCOEU0REExRjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBP
SWhUQ1EwUUJidFJWU0pHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAwKP6nv4JQnGl4QFal3Zk+bofgnl4u70t79/m3IFo8WNslwc4TSjNwv94VY3L0
O/2HDnOFSlDjItEJIvVNkVePyv7Wr7x6SOBAD/+TwV7dobA1K4H+JZ0SNIOQLHAP
bo8ZJlTNjZ4/RjFVJM/NkqCGLn7cW9dTdQ1QLccG1uRwz0Vwik227CDgl/KUimNB
f/31YcQNVX8Cw+iTbDm8fvFFf1cRiSEcqiPIuycEfqriSvaCxk/mid9DndPbIjOI
7Ac1NBpHiSnYHqGEYGS008MPG/eMdS7dnyl5ajXqIGInbAyg/7Pe4czv8Qvb5940
6itHt7YdUQEVCpreukaCSQDv
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:02 2026 by rpki-client